On websites at least, it's pretty easy to detect form types and whether they're for passwords or not. Not sure if there's a standard password object for native apps. If there was, I reckon samsung should be checking for it and ignoring it for auto complete.

It's prolly not huge problem, but it's a bit weird to see your password in the suggested results.

I've known the keyboard can remember passwords for a long time, I actually entered some manually in the library which were not being saved automatically so i can use it to automatically fill forms, if I can remember the first couple characters of the password.This is a huge security risk, but my phone is never more than four inches from my hand and I've never met anyone with balls enough to try and take it from me...

This happens to me sometimes on my Samsung Galaxy S3,like when I fudge up when entering in my Facebook Password and it asks me to enter it again, I will start typing it in and whoops, there's my password in the bottom suggested words bar! Definitely not cool!